Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: DbNlfA1dnZQUXxx9bKuNid8FBWihv22tN9ohD8p3Xh0=
Subject key identifier: 4B:90:57:FC:C1:11:FD:18:8B:70:1E:E7:D2:3B:7C:6B:A8:FC:85:A7
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 0198D73B5DC64F390E95E14F148E72620EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 14:00:48 +0000
Manifest this update: Sat 23 Aug 2025 14:00:48 +0000
Manifest next update: Sun 24 Aug 2025 14:00:48 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: u2eB/KEEgiJvm66tbHMGGwLCVcwhFg7ltikLDnOBQB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:5d:c6:4f:39:0e:95:e1:4f:14:8e:72:62:0e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Aug 23 14:00:48 2025 GMT
Not After : Aug 24 14:00:48 2025 GMT
Subject: CN=4b9057fcc111fd188b701ee7d23b7c6ba8fc85a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:da:b5:4c:5a:65:5d:41:fd:ec:14:a1:ed:
c2:8a:d1:c8:d2:ed:98:ac:44:0d:4e:8f:ec:cd:fa:
26:97:eb:b4:85:14:f2:8f:3d:c4:29:ec:5e:be:70:
49:61:b8:ed:de:18:0f:f9:a7:c2:3f:0d:88:0e:48:
9c:93:98:89:db:2a:7f:92:0f:d8:a0:fe:81:88:cd:
57:c8:51:5f:0b:d7:5d:9e:68:df:97:76:20:c8:6e:
16:d5:a8:40:a6:11:a5:e5:0b:0f:f3:de:09:f7:1e:
ee:35:8d:71:34:15:cd:4d:ef:77:9a:c7:d5:b7:92:
85:ed:37:c0:d1:55:bd:fe:62:7c:9f:6e:c5:2e:a3:
9f:99:5c:a6:bb:36:ec:19:dd:e1:5a:df:e8:9c:b7:
81:84:dd:39:12:a5:fe:2d:48:63:83:f2:41:73:b2:
f5:4b:bd:1a:66:ab:8f:4e:fb:be:b1:9c:1e:f5:bc:
f5:03:c7:58:78:5c:ce:db:0c:71:e8:ef:0c:e4:7a:
81:cb:4d:ee:66:5e:72:3a:98:7e:21:6f:ad:59:ba:
e1:c3:d7:96:38:23:46:9a:e7:22:90:77:1d:cf:4b:
11:45:25:f8:e8:0a:63:12:4e:18:dc:d8:13:7a:6d:
77:e3:7d:e9:5a:01:e2:ab:3c:60:b8:1a:c7:8f:d2:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:57:FC:C1:11:FD:18:8B:70:1E:E7:D2:3B:7C:6B:A8:FC:85:A7
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:41:b2:96:5a:ae:8b:37:7d:bd:c7:8e:48:60:13:da:f3:61:
c3:25:2b:a4:f2:c2:05:18:53:2b:e9:54:1b:d9:22:b8:e6:81:
85:6c:83:40:61:b3:5a:e8:0d:fd:80:04:d2:ee:d1:1f:9d:06:
85:2f:f7:0c:e2:0e:d2:04:a4:a1:dc:96:77:9b:41:cb:19:39:
66:72:b4:dd:7b:94:b9:a7:dc:ee:18:ea:32:7b:48:6d:4d:d3:
f1:01:19:c6:c7:cf:c7:ba:b5:9b:a9:48:6c:38:18:f5:91:75:
49:1e:98:1d:89:c8:a0:66:6e:8f:93:ae:d1:f1:a5:33:1b:e1:
77:c0:ac:c3:d9:57:59:cc:ac:20:9e:92:f2:e6:f7:8b:20:1a:
fd:d8:01:c2:d8:fe:90:1e:b0:5b:db:e9:0c:ae:d5:8f:90:50:
28:61:85:b1:bd:d6:5f:08:6e:8e:be:80:c8:ab:bf:52:6b:04:
15:d0:20:ea:49:b8:7c:36:93:2a:0a:39:b7:c0:08:62:80:3b:
27:68:03:21:dc:bd:83:ca:33:f3:8b:64:af:70:64:26:5f:43:
e4:3f:55:52:4e:a1:07:20:99:bc:0f:d8:33:b4:b5:ec:e0:ad:
68:30:db:e7:08:48:5e:67:18:6e:c6:22:a4:01:7e:4d:57:cc:
86:23:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:29 2025 by rpki-client